By: Dan Fischbach
Originally Written: July 15th, 2006
Whoa! Updated 8/30/08!
Hey you!
Before you read this guide here, you’ll want to take a look at this link right here (thanks Lisa!) that will get you fixed up (most likely) if you had issues with Spybot: Search & Destroy. Use Method 2. (or Method 4 then 2 if you’re having issues. By the way, there is no Method 3) Method 1 is for only those who know what they’re doing in terms of networking. I do not take credit for this solution. You can thank Yodma, Lisa, and pnordahl@eunet.no
If you do have issues with these Methods, I can help you though! Just post a comment here! 
What are the pros/cons of the above methods?
- Pro: You don’t need an original XP CD to fix it! You can use any kind of computer or OS you want! YAY!
- Con: There is no real GUI (Graphical User Interface, aka it’s all typing…but not much!)
When downloading the .ZIP file, please unzip it. A .ISO file will be inside. Please leave the file in .ISO form. Do NOT unzip it or anything like that. .ISO files are like .zip files, but with special information that helps the CD burning program make them bootable, etc. so if you unzip the .ISO file, you’ll ruin it. You can use Active ISO Burner to burn the image you downloaded. When downloading Active ISO Burner, you can just get the middle one on the left side of the page. Please make sure to burn it at a slow speed (4x) to get the best results with even the most picky drives.
Some of the main things I’ve found that causes this loop is that:
- People don’t uninstall old version(s) of Spybot: Search & Destroy when installing a new version
- People uninstall the old version, but they don’t get rid of the Spybot/TeaTimer folders in C:\Program Files
- People uninstall the old version, but they don’t get rid of the Spybot folders in C:\Documents and Settings\All Users\Application Data (I don’t think you really need to get rid of this, but I do just to have a full uninstall)
- People don’t know when a new version of Spybot: Search & Destroy is available (no notification in updater, no auto-updater, etc.) Always check before doing a scan!
If you do this stuff in the future, people will have less issues.
If you feel that you scan with Spybot: Search & Destroy a lot (one a day, once a week, etc.) and it’s finding some things (besides cookies) during EACH scan, you really need to educate yourself on computer security. Your computer should normally be OK without all this excess scanning. If something’s really wrong, then you might need to run another scanner to find what Spybot: Search & Destroy can’t find. Please contact me if you need help.
If you want to use the method I just described above, don’t read any further. Go use that link above. If you need help, post some comments down below in this page!
If you want to continue with the Bart PE method that I have described below, then please continue reading….
Intro
Did you recently install some software, do a Windows Update, or run a Spybot: Search & Destroy scan with an older version of Spybot and now when you try and log on to Windows XP it automatically logs you off? Not to fear! One of my customers recently found themselves in such a situation. After some Googling, I found a solution, and I’ve posted it here in full, technician-friendly, step-by-step form.
If my solution does not work for you and you need the data off the hard drive, search local websites for any sort of USB-to-IDE or USB-to-SATA device. These devices will allow you to hook up your hard drive to a working computer via USB and get the data off of it.
What you’ll need:
- A working computer that’s running XP or higher (I am not sure about server OSes):
- Your Windows XP CD (Restore/Recovery CDs from your computer maker/manufacturer may not work without some special Bart PE plugins)
- This CD must have Service Pack 1 or higher on it. If your CD does not have this, please see here for info on slipstreaming your original XP CD with the latest Service Pack. You do not need to burn the new slipstreamed version of XP to fix your computer if you don’t want to. Simply point Bart PE to the directory in which the XP CD is on your hard drive to burn the Bart PE CD.
- An Internet connection (!)
- A blank CD
- A CD burner/writer
- Your Windows XP CD (Restore/Recovery CDs from your computer maker/manufacturer may not work without some special Bart PE plugins)
- The non-working computer in question:
- Drive that accepts CDs must be bootable (if it’s not, you shouldn’t be running Windows XP in the first place!)
- Access to the computer’s Basic Input Output System (BIOS)
Got everything? Let’s get started!
Very thanks its very useful my dear freind thanks for ur help
Thanks for commenting! I’m glad I was able to help you.
Worked like a champ. Cleaned six PC’s in a matter of minutes this morning.
Thank you very much!!
Great!
I am glad to hear it! BartPE and the Bart DOS CD to update my BIOS without a floppy has saved me a lot of headaches. The guy is a genius.
As to why this occurred on 6 PCs, I have no idea. I would run the usual programs (Ad-Aware, Spybot, SpywareBlaster, Bazooka, Windows Defender, and even AVast! Antivirus) to check for/block spyware. Good luck!
Wow!
I triee everything but THIS one worked!!
Hi,
The BartPE application worked and it was a pretty job … but after some 24hrs of stability the problem returned…
i.e the system encountered the automatic log off after log on. Using it again solved it but the problem comes again after some hours…
thanks… it was a good project all the same… im working on this myself to see what would be a lasting solution…
Hi Sam,
If you’re talking about the XP/Logon/Logoff loop continuing on your system after 24 hours of continuous use, I would say that’s pretty odd.
If you’re talking about BartPE acting weird after 24 hours, that’s normal, as I think it has a built-in function to cease to properly after 24 hours.
Let me know if you find a solution. Most likely it’s rootkit/spyware/virus. Good luck!
hi,
thanks for the help. this one worked for me.
I love you and everything you stand for. Thank you for providing such perfectly understandable instructions for repairing this disastrous anomaly.
thanks for that it worked a treat
The bartpe application is on its own and it does not really have anything to do with this particular problem… it’s pretty good an application… it kinda vmware xp so that you can still have access to ur machine even if the os has some corrupted files…
Now the issue of the log on/log off is a different case… basically different solutions available is based on the one here too… in that the .reg file basically has a script that changes the winlog on registry value to the original location of the log on file that has the correct log on details… in some cases.. the directory must have been likely changed to wsaupdater.exe… instead of the normal userinit.exe
Now… changing the registry path that xp reads data file for a user before it logs on to userinit.exe which must have likely been changed if this log off /log on occurs is what the whole solution here is talking about… but basically there’s something else causing this problem because it’s working for me… perhaps the only problem that you guys that it has worked for is having is this particularly issue I highlighted… basically if the path has been modified in the registry … windows will definitely not be able to log on…
But; the case I have here is different… still trying to know why anyway… I’m looking at contact microsoft directly and try to ask them for registry entries that directly have something to do with windows log on…
In a nuthshell… the solution is not working… perhaps something else is responsible for my own case of log on/log off…
thanks so so much… at least I was able to get to know about the bartpe application… im a network administrator… I know it’s gonna do lots in my software archive… thanks…
take care guys….
Samuelson:
Have you looked at KB articles from Microsoft detailing the issue? They might have other solutions that will work in combination with BartPE, or other programs. The most logical reason to me is that it’s a rootkit starting as a service at startup that modifies the registry or hooks into some files. Try using some rootkit software like Blacklight. (it’s free, I believe) Also, Spybot: Search & Destroy was updated to 1.5 recently, so update that too, just to be sure…if you even can.
By the way, is this loop happening on one account, or any account on that machine? If it’s any account, it looks like some system files are being messed with via a rootkit.
Wow, this z what the whole world has been looking for!!Worked like a miracle.Well may be a mouse should be added on the requirements!!
THANKS A BUNCH.
God bless
After trying a number of methods I ran across BartPE. It worked like a charm. I am still trying to determine what happened, to cause this laptop to go south.
Kudos What a well thought out utility.
Didnt work for me… I was hope full.
I am still getting the logon/off loop, safe mode doesnt work either.
Jeff:
If it’s still happening, there may be a service or program starting up when your computer starts to make the fix not work. It sounds like you have some spyware or a virus. BartPE or AVast! Antivirus, or Symantec/Norton should have antivirus CDs you can download from their websites that should help you.
Let me know, and thanks for commenting!
I never taught I could sort out this problem in a minute. Thank you very much
Man your solution works excellent. I’ve been working with this kind of problem for 2 days (straight) but when I read this and tried it, it just took me less than 10 min. Big thanks man.
Hi Tried the instuctions above and it didn’t work for me.
Still did the login logoff loop.
I did manage to fix it by copying the userinit.exe file from another pc, and while booted with Bart I copyed it into the system32 filder replacing the corrupt one. It worked and I am now able to log into the machine.
Thanks for letting me know. You might want to make sure that the version of userinit.exe you copied over was the same version that was weird. The file sounded like it was infected to me. You might want to do a virus scan of your machine now that you’re in. Good luck!
No worries Dan. I thought I would also let you kow that I am an IT consultant. This was a clients PC and I was given it for virus removal (Cleanup)the logon was working fine. After the 1st scan found 1677 virus’s and over 7,000 infected files in which the virus’s were removed, the logon loop started after the reboot. The userinit.exe file is universal accross XP machines so it is quite safe to copy over a new one. I just thought it was very interesting that this logon loop happened after the virus was removed…..part of its payload must have been to alter the userinit.exe file upon deletion.
Your tips will come in very handy in other areas as well….thanks for your time.
Mortie:
Thanks for responding. Glad you’ve got everything under control. The main thing I was concerned about is the differences between file versions if one machine had a different service pack installed than the other, etc. With so many viruses, it might have been best to hook the hard drive up to another machine, save what files that were needed (as it sounds like a majority of the system was corrupted) and give it a good ol’ reformat. I really try to avoid this myself as it takes a lot of time and effort, but cleaning a heavily infected machine can be tough. If most of those files were just junk files and didn’t affect the system files that much, then everything should be fine for the user. I’m assuming you’re using all the good free essentials?:
)
*Ad-Aware
*Spybot
*SpywareBlaster
*Bazooka Scanner
*Windows Defender
*AVast! Antivirus
*Mozilla Firefox (
Remember, training users not to download everything is key too!
I have this problem, but its a bit diffrent. I log on, but after some secs, its logging off again, saving info, and then back to start. I cannot get in. I suspect virus, but how do I do anything, without any other useful computer to do stuff with? How do I do that? I have windows mediacenter on my tv, that is the way I get online now, but I am so mad. I suspect a trojan, that was the last thing I saw when I was at the other comp before I wanted to restart, then shit happend.
Sorry Maria, but you’ll need a second computer to make the CD off of. Try using a laptop or a neighbor’s or relative’s computer. Sorry I can’t help you anymore. Good Luck! Keep us posted.
Hi,
I’m sorry if this is a dumb question, but I’m not sure how to burn the disc. I only have one optical drive available–so if the Windows XP disc is in the drive, how do I burn a CD-R?
Thanks for your time,
Tim
Hi Tim,
The BartPE Builder should notice this and pop the Windows XP CD out of the drive, allowing you to put in the blank CD to burn to. You might also be able to copy the contents of the XP CD onto your hard drive temporarily, and point the BartPE Builder there.
Good Luck, and remember: There are no stupid questions!
Thanks for the response! I will definitely try this out.
Hi.
I’ve tried this but it didn’t work for me. Is there anythink else you suggest?
Try copying over userinit.exe from another machine as one user suggested.
Hi Dan,
So how do I copy this file on the infected computer. How do I get there and what do I do.
The only way I can get there I think is to get to the CommandPrompt from BartPE. I assume I can just copy this userinit.exe file to a floppy disk and then say something at the command prompt???
:)S.
The floppy disk idea would work, but I know of a simpler way!
When you use the BartPE Builder, there should be an option on the main screen of the Builder that allows you to put your own files (custom files folder) onto the CD when it is built. You then can use the A43 (forget the name) file manager from the GO menu in BartPE to copy over the file.
Good Luck, and keep me posted!
I already have the BartPE disk made so I guess I would use the floppy. Can you give details on how to copy this file from the a: to the harddrive. Thanks.
Also, when I made this Bart PE disk and when I followed the instructions, my disk didn’t have the FixMoveHD.reg file that you have listed in the pic up above in the instructions. Is this file needed for the fix, its not mentioned, just the other one FixLogOnOffLoop file?
Sheri,
Yes, all you need for this fix is the FixLogOnOffLoop.reg file. If you were to put the userinit.exe in that same folder as FixLogOnOffLoop.reg when making the BartPE CD, you would have burned that file to the CD as well.
To copy from the floppy, open up the command prompt in BartPE and type:
copy A:\userinit.exe C:\Windows\system32\
That should work!
THANK YOU! That worked! Wooh!
ok and now its doing it again.
If you can, please contact me on Skype here, or call my cell phone at +16094587920.
Hi Dan,
I don’t know what Skype is. Where are you located. Country?
Didn’t work for me either but I was able to use the registry editor to copy the file userinit.exe from the cd to the Sysytem32 folder on the C: drive and it would finally boot. I think that it was deleted by an over zealous virus scan. It ran slowly for some time, I guess building a user database. I got past it and that’s all that counts.
Thanks
Works Great Thank You Thank You Thank You
Though I have to copy the userinit.exe in system32 folder and i copied it on the CD with FixLogOnOffLoop.reg file
Runscanner isn’t showing up on the plugins list and the two links to the author’s site don’t work.
Sheri:
I also gave you the option of calling my cell phone at (609) 458-7920. I’m in the USA.
Claire:
I have archived the plugins and things that you need here on this post. As for the author’s site not working, thanks for letting me know. If the plugin isn’t showing up under the list, that means that you missed a step somewhere. Please reread the post and let me know!
Thanks everyone!
Dan
Seems like a good program but it did not help me, yet. I could not find the scanrunner plugin and rpelacing the userinit.exe did not work either. The notebook in question did not have any recovery CD’s with it when it was bought, (claimed by buyer). Any ideas? The problem is the logon loop problem. Which version of Bart PE did you use in your example?
just read the rest of the info you gave, and found you archived it! I´ll check it oout.
Thanks
Help,
Have created rescue bootable cd, and loaded SCSI drivers. imported the “fixlogonoffloop.reg” did not work. Then copied the userinit.exe file to system32. That also has not fixed the problem.
Thanks
Frank
Just a follow up. I took the drive and made it a slave in another system. Booted up that system and ran virus scan. I also ran the microsoft patch “Windows-KB890830-V1.34″
I then re-installed the drive to the original computer and re-booted it up.
Same problem. no fix.
Frank
ok re-booted and pressed the f8 key. then loaded the last know working profile configuration.
then booted. Same problem.
Computer loops back to a log off right after log in.
any other ideas?
Looks like I am not alone with this problem.
Thanks
Frank
Frank,
The only suggestion I can give you is to apply the reg fix AND the userinit.exe file in BartPE in the same session without rebooting. I would also suggest you look into the registry of the infected machine to see if there are any bad/fake services running at startup (look for CurrentControlSet) that would be making the infection reappear.
As far as you putting the drive into another machine and applying a Windows fix to it, that does not make sense. It would have only applied the Windows fix to the Master drive, as the slave would simply be regarded as data, unless there is a special command line switch I don’t know about that let’s you apply Windows Hotfixes to a Windows installation on a drive loaded as a slave drive under another Windows installation. Remember, you only applied the Hotfix to the installation that you were booting to (active partition).
Loading the Last Known Good Profile would not have helped the situation.
Sorry, this is all the help I can recommend, as this article was not meant to go this far out of scope.
Please keep me posted on your progress.
hey dan,
why am i always getting an error that prohibits me from burning my cd? i always get 4 or 8 errors and it says it can’t find certain files. i am pretty sure i followed all the steps listed!
Here are the things im doing:
I am not using the fixlogonlogoffloop.reg due to a virus. instead i am using the userinit.exe. i put that as my “custom” source. also, is it ok if my source is not the actual windows xp cd but a copied version of it (copied files off the cd) put in a folder stored in my hard drive? is that why i am getting the errors? i am also using the runscanner pluggin. Any help would be much appreciated!
Hi John,
The only suggestion I can give you is to try a different recording method. There should be another option on the BartPE Builder main window that allows you to select your burn type: either CD Record or Star Burn if memory serves. Try the one you’re currently not using to see if it works. Also, note down those errors. You may have not copied all of the files from the CD to the hard drive correctly.
Good Luck, and keep me posted!
Dan
Hi Dan,
Just been reading the solution to the logon/logoff problem (which I have just come across on a friend’s computer.
I can’t logon normally but can in safemode. I have not gone the bartpe route yet, but was wondering if there would be any difference in doing the same instructions (import the reg file and copying the userinit.exe) in safemode rather than bartpe? Just that it didn’t work in safemode and will next try the bartpe route if you think it is different.
Thanks,
Jarrod
Hi Jarrod,
No there shouldn’t be any difference. Keep me posted on how you make out with fixing that. More than likely, the issue is a service or startup program running during Normal mode, which is preventing normal login. Do a spyware scan in Safe Mode to see if that’s the case.
Thanks,
Dan
Dan,
Thanks for the reply, I appreciate your help and attention.
Couple of points to clear up on the slave drive condition. I am running scsi hard drives. All that I did was to change the ID for the HD to boot from. Non the less with the os dormant on the problem hd I ran an AV scan from the clean other SCSI drive. This did not help.
I also ready your comments above. I ran and copied in one session of BartPE.
No change in the result. It did take a while to boot. Guess it was thinking. any way it eventually returned a log off.
I am concerned about this drive. It is actually a dormant clone drive that I use as a recovery template.
In other words it is a full in stalled ready to go version of the working HD on that computer. I has not used this drive in a while but through the couse of work, used it to restore and re-clone the computer.
This is really odd. The clone target worked. However when I tested this drive at some time after, This drive did not work.
Thus I am concerned that I have the problem on the other HD.
And thus I am concerned to try to find a cure.
Thanks again
Frank
Currently I am running diffrent types of AV software to see if it will find and or correct the problem on the scsi drive in a dormant OS state.
Thanks
Frank
Dan,
Perhaps you can assist with another problem on one computer.
I think this is a Browser / Master Browser issue.
I have another computer that will add additional drives from other shared drived on the server.
It will perform this task with out the request.
It will grab the last server shared folder and map it to a drive letter.
It will continue to map drive letters until the alphabet is full.
This one computer is also getting slower with net work access to the server.
Any ideas?
Thanks again.
Frank
Thanks Dan for the instruction, I fixed my windows log on log off problem, it turn out that the userinit file was the problem thanks alot
Ali
Saudi arabia
Thank you very much it works! more power
thanks alot! it helped alot… more power to you guys..
Does NOT WORK! Tried to use the fixlogonoff.reg file, added to registry in bartpe and still have the loop!
Frank:
I’m confused as to what you want…do you not want the task to automatically be done?
Chris:
Have you tried copying over a fresh copy of userinit.exe like the other comments on here (and my edited post above) have suggested?
Dan,
Automatic or other wise.
I have tried the fixlogonoff.reg as noted above.
I have now replaces the ntuser.dat files for each of the log in names. I did this by coping from the working clone drive.
I have also replaces all of the system32 directory with a copy of the working clone drive.
When I re-boot I still recieve the same log on log off loop.
This would have me to think that the problem is in the registry file.
Frank
Frank:
Do you know how to edit services in the registry? Something still tells me there is a rogue service that is loading at startup that is preventing login. This can only be done (since the files are legit) via the registry.
Thanks Dan
No I do not know how to edit services with out the system running, or via registry.
Thanks
Frank
Frank:
This article is for Windows 2000, but the same concept will work in XP also. You’ll need to explore a bit and look at the names of services on the right pane. You must be VERY careful. The main thing is that you want to make sure you don’t disable or delete services that are legit. One thing I can suggest is Googling services you aren’t sure of to see if they’re legit, or part of a spyware program.
Good Luck, and please let me know what you find,
Dan
Dan,
I’m trying out this solution, and when I boot my m/c with Bart PE CD, after the “BART PE Created With PE Builder” screen, the m/c automatically reboots. I don’t see desktop or GO button. Could you please help. Thanks.
Ramakrishnan:
It sounds like the CD is burned badly, or it could be a RAM issue. This is very odd. I’m assuming you’ve tried booting it multiple times on the same computer, and also tried booting with it on another computer? Let me know what you’ve done so I can help you more.
Thanks!
Dan
Dan,
I gave up on the repair and just restored from the clone drive.
Thanks for the help.
Frank
Hi, when I boot from the CD I receive the message, “Please insert th disk labeled Windows Professional XP CD-ROM into Drive A: Press enter when ready.” Where did I go wrong? (thanks). - Alice.
Alice:
The only thing I can suggest to you is to make sure there there are 0 errors after burning with BartPE Builder. Also, what kind of CD is it? It can’t be a CD that came with your computer if it’s a Dell, HP, Compaq, etc., as they only give you recovery CDs. It must be a real XP CD that has XP SP1 or higher on it.
It was a non-oem cd so it it must have been my own error. I tried it again using a different machine to create it, then went to the looping machine and it worked wonderfully. Thank you very much. - Alice
Alice:
Great! I am glad to hear everything worked out fine!
there is nothing labeled X: and I cannot access the cd drive
thank´s
Thank you so much! The feedback section was extremely helpful as well, which is why I’m adding to it. My CD writer would eject the XP CD but never give me enough time to swap it out for a blank disk. (I barely had time to grab the XP CD before the drawer closed again!) Using your suggestion to copy the XP CD files (I created a folder on the desktop of the ‘good’ computer), and placing the blank CD in the CD drive, I was able to build from the desktop folder and write to the CD without errors or problems. My laptop is now up and running and I’m a happy camper. Thanks again, and I hope your holidays are merry and bright.
I’m very glad the comments here were able to help you!
Happy Holidays!
AARON:
What are you having issues with? Are you able to make the Bart PE CD successfully?
Thx alot you save my day ^^
Thank you very much!!! Your “Fix Windows XP Log On/Log Off Loop”, helped me a lot!Thanks again!Take care
I reinstalled my system last weekend, and after finishing my installation of all the applications rebooted the system and everything was fine.
Joined the PC to my domain and my Windows Update Group Policy installed all the windows update to the machine.
Once machine was rebooted, got the logon/logoff problem mentioned here. Did some research and found nothing, so decided to wait until this weekend to redo the system, which I did today.
Followed the same sequence mentioned above and once my Windows updates were applied, exact same problem occured.
No I suspected either a hardware problem(using new disk), a problem with Windows update on my WSUS server, or a virus.
I found this very strange and searched on how to fix this and this is where I found this site.
I have reinstalled again (3rd time) my system, so can’t test the BartPE solution, but will do so if problem happens again.
Just thought I would mention what happend to me as it might be related to windows update.
For now, I’m scanning with zone alarm for any virus or spyware on my clean windows xp system, and will start installing software once that is done. After that I will apply Windows update from my server to see if that causes the problem.
But before doing so, I will Ghost the system after the virus/spyware scan just in case, so that I don’t have to reinstall again.
gtherreault:
Seems like you’ve been doing a lot of work! Nothing I know would cause such a thing from a Windows Update. Hmmm…if you reinstalled Windows so many times, the only kind of virus it could be would be a boot virus, or one that infects the low-level regions of the hard drive. This depends if you’ve been reformatting or not.
The ONLY other thing I could think of is something with your WSUS server. Have you tried not using that and gotten the updates straight from Microsoft via good ol’ Windows/Microsoft Update? Have you done a virus scan on your WSUS server?
As for virus scanning, I would recommend “AVast!”.
Please let me know what you find on your system (after installing Windows Updates one by one, if possible) so that it can help other people here.
Good Luck, I know you’ll need it!
Dan
Thank you a thousand times!!! This article save me a lot of valuable files.
I haven’t applied any windows updates yet, and have had no problems so far, so that rules out any of the software I have installed.
No viruses have been detected either.
I created a Ghost image of my system, so I will be able to try both the updates directly from Microsoft and the ones from my on WSUS server, if the problem occurs again, I will at least have an idea where the problem lies.
I suspect it may be something on my WSUS server that is installing on my system and causing the problem.
What I will also try is setting up a virtual XP machine and applying the updates from my server to see it the problem occurs on this virtual machine as well. This way I will be sure what may be causing the problem.
With the holidays I may not reply right away, but I will in the coming weeks.
Hi i tried everything you said,now when i try to burn cd i get message ..source files wrong version,you must use service pack 1 or server 2003 of windows. Any ideas on this. thanks
nikko:
You must use a Windows XP CD that has Service Pack 1 or greater on it. Since I’m assuming you don’t have that on your CD, please dump the contents of the CD to the hard drive and merge the contents of it with Service Pack 2. This is known as slipstreaming. Please see here on how to do it. You don’t need to reburn the CD unless you want to. Just point BartPE to the right directory. (aka, the directory that you dumped the contents of your original XP CD to)
Hi,
Using Win XP Home Edition
I have created the cd according to the instructions but upon loading the BartPE on my system I get en error “The file Viapdisk.sys could not be found.” I then have to press any key to reboot
Does anyone know what may be causing this error.
Thanks,
Keith
I tried with BartPE CD Recovery but don’t works with me
I run PE Builder v3.1.1.a for make a CD and he give me always the same error : returned exitcode 4294967295.
I boot the machine with de CD and works, apears the menu GO and work, but the result is the same, XP make a loop in logon/logoff
I tried change the file userinit and change the hkey but i have one thing that i don’t mean:
In my machine i have two HDD
In the HDD with loop the Hkey have this path
x:\i386\system32\userinit.exe,
the other hdd (good) i hev have this path
c:\windows\system32\userinit.exe,
i modify the HDD(Loop) for c:\windows….and when i reboot he returned with the same path ( x:\i386…..)
Why?
what’s mean the error in the CD (returned exitcode 4294967295)? It’s important ?
Thanks and sorry about my english
Keith:
Upon Googling the error, it sounds like it deals with motherboard drivers relating to your SATA controllers. You may have to instruct Bart PE to load these drivers. Google for Bart PE and you’ll be brought to the Bart PE Homepage, where I’m sure an FAQ or a search there will answer your question. I didn’t write Bart PE, so this is all I can offer.
Jose:
I believe the X: drive is the RAM Disk that Bart PE makes. I haven’t booted Bart PE in a long time, so this is all I can say about that. One thing you might want to do is unhook the hard drive that is working fine, so you know that you are applying the fix to the right drive, which would be the non-working Windows drive in this case. Also, I used Google to search for the exit code. It deals with burning big files. Are you sure you’re burning a CD and not a DVD? Also, how are you building the Bart PE CD from the original XP CD? Are you using an original XP CD, or did you have to slipstream your CD so that Bart PE could build it? If you have any trouble understanding what I am asking, let me know, and I can try and help you more.
Thank you so much my friend…this help me a lot…
Worked great!!!! Directions were easy to follow and the pebuilder was a huge success. Thank you for saving my computer.
if this work for me, i’ll treat you… haha
Hi.
Your tutorial is very good, I Have tested and it works.
My question is, if I am dual boot and the boot with problem was in D:\, because I have two win XP, one in c:\ and other in D:\ with your tutorial the only registry which I can edit its the regedit of the C:\.
You can help me to resolve my problem in D:\ partition?
Thanks a lot.
Jose:
I would suggest you remove the drive that is good, which is the C: drive. Just disconnect the power to it. Boot up the computer and Bart PE should only see your D: drive. It will be listed as C: under Bart PE. Once it is fixed, shutdown the machine from Bart PE, and reconnect your normal C: drive power again. Boot up, and everything should be fine.
Please let me know how it goes.
Hi Dan
i maked a CD (and not a DVD) from a XP CD Original
About the error i see some information in the google but is some confuse for me and my english.
when i boot with Bart Pe CD i have in the menu GO this
System,comand prompt, run, about and shut down.
i choose run regedit and go to hkeylocal machine and i see and seems well file userinit.exe.
If it’s seems well i don’t need modify, so i reboot and don’t works
Must i do anything more?
i have two hdd in the machine but the principal boot is hdd (with loop)
best regards
Jose Ribeiro
To
Jose Carvalho
gostava de trocar algumas impressoes contigo pode ser?
Msn : jribas@netcabo.pt
Hi Dan
Finnaly i create a Cd without errors but after run Bart Pe de xp don’t works.
Jose:
I am really not sure what to tell you. At this point, the only thing I can think of is the version of XP you are using. Is it an English version, or is it in another language by default, like Spanish?
In terms of running Bart PE, you ran it, and followed the steps I posted and it did not work? You still get the loop?
Hi Dan
Portuguese xp version ( is matter? make diference in the process?)
i still get the loop
i go repeat again all your steps and tell you later the result.
thanks
Dan
With a friend help i do this:
Bart pe Boot in system tools run remote regedit and:
i had c:\windows\system32\unsrvc.exe -runservice and changed to c:\w…\syst…\userinir.exe, boot and Voilá :
WORK’S WELL WELL WELL
Must i do anything more ?? or finnaly is end ? (a happy end)
thks
Dan
work’s finnaly
with a friend help i run Bart Pe System tools, remote regedit and find C:\wind..\system32\unsrvc.exe -runservice i changed to userinit.exe and Voilá :
WORKS…WORKS
Thks
Thank you so much~
Happy New Year~
Hi Dan
Finnaly work’s
With a help friend i tried in bart pe cd system tools remote regdit and changed c:\wind……….unsrvc.exe by userinit.exe
thanks very much
Working fine!
This is great!
Thank you!
Awesome!!!!
This is realy great!
Thank you so much!!!
I LOVE YOU! I just started having this issue out of nowhere. I have no idea what the heck happened, but this fix worked. Now I have to fix my friends computer, who is the probably the person who messed my computer up in the first place! It’s better to copy the XP CD to a folder on your hard drive and then use that as your Origin in Bart PE. Makes burning the cd alot earier. You could also use a little more illistration for the not so tech savy peeps. I write knowledge base docs for people like this so it’s always on my mind. I’d be happy to do it for you and email it to you! Just send me a note!
GREAT job man. Work’s fine. Old days of formating are finished. Tks 4 ur help!!!
Thank-you so much for clear instructions that actually worked. My original Bart PE didn’t have the remote registry edit capability, now you have made life so much easier. After so much searching and finding no really good answers, I must say this is #1 in allowing you to get to the registry when safe mode does not work. Great job!!! much appreciated. Thks for saving me hours of reinstallation.
Thank you so mutch, it fixes my pc.
Muito obrigado
Man…. u are the one!
Thank you very much!! I love you hehehehe!
Um alo do Brasil =]
Hi,
I have the same problem since yesterday. OS is windows2000, service pack 4. Any help is more than welcome. Thanks.
Marko.
When I select remote regedit on the System tools menu the registry editor don’t open! Instead a windows open and ask me to point to the directory I want!
I have tried on my desktop and the cd works fine, the regestry editor open, but not in the computer (a portable one) that I need to fix! What is wrong? I have used the Windows XP of my desktop because the portable one don’t have any. Is this the problem? How can I fix it? Thank for any help anyone can give me, I’m desperate. jotappina@gmail.com
João:
Try deleting everything and starting over from the beginning. I recently moved the site to another server, so some required files may have not downloaded correctly. Please let me know what happens after this.
Hello Dan, thanks for your post. I have the same problem as described on this post : http://www.bleepingcomputer.com/forums/topic125294.html , I have exactly the same symptoms. The virus that causes this problem is named : Instalar.exe or unsrvc.exe or win32srvc.exe (it’s always the same virus). It changes the reg file, in fact it changes the path to login with the userinit.reg into unsrvc.exe , and if you delete the unsrvc.exe ( what is pretty sure to happen because any antivirus recognize this file as a Trojan ) , you can’t login anymore. I didn’t tried your solution till now, because I wanted to ask you if your solution is going to change the reg file? Sorry for my bad english , and maybe sorry for any stupid question because I am a newbie in all this and thanks in advance.
After spending two days of frustration trying to get the system to function (Logon-Logoff), including re-installing windows XP,which didn’t correct the problem. I came across your solution. It worked!!.
Thank you very much.
Lei:
Thanks for info on the virus. I’m sure it will help other people here. As for the fix, it does change the registry, but it only changes one line. You might want to right click on the registry file I offer here and click Edit to see what it changes. Good Luck!
Well, I already have made 2 cd. In my desktop, everything work fine. The registry editor open and I’m able to see the desktop drives with the A43 utility.
In the laptop I want to fix, an HP nc6320, the registry editor don’t open and i’m not able to see the drives. Only drive D: and B: appears. It’s seems like when booting with bart it does not recognize the drive C: of the laptop.
Thank you for helping me.
João:
Thanks for being specific with that last comment. What are the B: and D: drives? Are you able to see the contents of the partition that Windows is installed on? It sounds like you may have to build the Bart PE CD with some special drivers if those B: and D: drives are NOT any partitions on the hard drive. I know HP computers normally have recovery partitions, so let me know if you can see that at all. If you can, then you can see the rest of the hard drive, and something is wrong with the C: partition of the drive. The Bart PE website has more information regarding loading custom drives up when making a Bart PE CD. You might even be able to load drivers up upon booting the Bart PE CD. It has been a long time since I’ve booted one.
Keep me informed!
Dan, thank you again for your reply.
Drive B is named RAMDisk and I don’t know what is is. the drive is FAT and have 32mb, 18kb are in use.
Drive D is the BartPE boot CD. I can’t see anything else.
Will try to build another cd with more drivers. I think there here: http://www.nu2.nu/pebuilder/drivers/ just don’t know wich one to use.
I know my HP laptop have partitions, and even dualboot wiht a linux SO but I’m not able to boot from linux version… there a windows missing DLL… I just want to get my files back, I have no backup of a lot of them!
Hello again, I tried your solution today and it work 90 %.
I can enter into my windows again but all my personal settings were lost. It showed me the messages like those shown when you use the windows for the first time. All my programs are still there, lets say online the files in outlook have dispeared ( I found now the outlook folder where the emails are and I finally could recover all the emails ). I just wanted to tell you with this post that for me, you are a genius ^^. Thanks a lot
Lei:
I am sorry to hear that your personal settings are gone. Have you tried looking for your user profile folder under “C:\Documents and Settings\”? As for your computer, I would try and back up anything you can on that computer, and reformat the hard drive to get a fresh start. If you need how to “Show Hidden Files and Folders,” please Google that as I am sure that will help you find things that you might need to backup. You can post here if you need any more help and I can email you and give you my contact information. I can help you over the phone or Skype.
Hi,
Will this work with Windows 2000?
Thanks!
Ushhud:
Bart PE will not work with a Windows 2000 DISC, but if you have an XP disc to make the Bart PE CD, then I don’t see